$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/df581f4d-9216-347c-9301-b0a5605ec4f3.roa File: df581f4d-9216-347c-9301-b0a5605ec4f3.roa (raw, json) Hash identifier: fouAQ1tRwJ0SXv4OqsYp1CTH5CIBJodRR9V7pZvsY/4= Subject key identifier: 28:1A:83:98:01:25:DE:79:AE:BA:45:23:1D:90:A3:69:11:6D:71:39 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584495FDC7B3E569C795F8953380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/df581f4d-9216-347c-9301-b0a5605ec4f3.roa Signing time: Tue 16 Jan 2024 12:00:00 +0000 ROA not before: Tue 16 Jan 2024 12:00:00 +0000 ROA not after: Mon 16 Sep 2024 04:00:00 +0000 asID: 13335 IP address blocks: 172.68.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:95:fd:c7:b3:e5:69:c7:95:f8:95:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Jan 16 12:00:00 2024 GMT Not After : Sep 16 04:00:00 2024 GMT Subject: CN=baf18120-9c12-423b-ac0d-f6f71e2828d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0e:8e:65:25:9a:9b:5f:fa:3f:41:75:f0:c2: 2f:f2:4a:d0:1b:27:63:f7:de:3a:19:ce:84:b0:25: 58:24:1b:59:c9:34:97:78:dc:ab:1e:7a:56:ea:c9: 66:3c:f3:41:e0:25:b4:c9:22:8b:bc:ca:86:70:a1: e7:d5:71:ad:a0:31:57:df:e9:db:e0:58:d6:02:b3: 50:33:9b:c8:6b:72:75:45:57:1b:e4:f6:6b:0c:08: b5:14:c9:60:74:83:35:cd:bc:0c:4c:9f:6d:51:16: 9c:5f:8d:8b:a5:8a:ce:6c:16:e0:15:f6:72:61:5d: 9f:9b:dd:6d:70:5d:15:40:b5:d3:5f:12:57:04:33: a2:9e:a3:2a:8a:80:62:16:a3:7f:1a:d7:db:0c:3f: db:ca:f8:0a:7b:43:d8:98:a0:8c:7d:57:a1:6d:c4: 5f:fb:f4:5c:9e:f7:9d:b3:11:0b:17:2a:58:a1:45: 63:1a:8b:35:ce:18:31:ec:54:be:7a:17:14:cf:d6: b6:70:f6:ad:9c:b0:92:d2:7f:c0:7f:d8:3e:22:c3: d2:51:18:e0:bd:ab:f1:21:72:54:9f:83:96:bf:d2: 1f:be:99:b6:50:e6:d1:81:1d:cb:17:4c:95:6a:d8: b2:f2:df:a6:8c:06:ba:65:a3:71:66:0e:17:99:a5: 64:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1A:83:98:01:25:DE:79:AE:BA:45:23:1D:90:A3:69:11:6D:71:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/df581f4d-9216-347c-9301-b0a5605ec4f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.68.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:cd:f2:05:fe:29:ad:7e:e9:e4:dd:aa:8c:c8:e9:0e:f6:e8: 7e:1c:e7:33:07:cb:02:41:37:96:a5:3b:64:31:14:65:65:c7: c7:d9:fe:59:4b:cc:3d:0d:7d:de:d3:02:6e:83:82:0c:d3:af: 8f:9d:4d:4b:0c:a1:a8:35:28:00:b9:b6:62:4f:6b:54:7b:77: 5f:06:f2:08:36:8c:1b:34:fa:36:de:91:5c:c0:69:22:bd:6b: c7:0a:15:0d:a6:d3:97:25:23:ab:26:31:0c:1c:f0:fd:b4:67: ce:0d:e9:c7:aa:15:97:2d:4b:50:a5:f8:19:55:1b:af:b9:93: b2:33:55:1f:c2:09:63:20:c8:69:f3:71:16:ca:72:3d:b9:a7: 0b:92:51:3c:73:0d:69:86:04:9e:f8:ec:14:dc:30:3e:be:c2: d9:0d:38:09:66:b9:66:64:d3:39:ac:b0:48:c8:1f:cb:89:3c: c8:b2:47:0b:68:6c:8e:50:9a:6e:5d:aa:88:76:0b:a1:83:3a: be:41:7b:8b:a2:43:ef:5d:45:b4:64:8e:6f:bc:4e:1d:34:27: 9c:a7:e8:38:42:58:82:bf:b1:e6:9f:26:14:8c:fb:bd:6f:4d: 4a:91:5a:32:2c:1a:8d:42:bc:3a:e5:c0:42:b9:0a:31:9c:65: d9:aa:95:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWESV/cez5WnHlfiVM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDExNjEyMDAwMFoXDTI0MDkxNjA0MDAwMFowLzEtMCsGA1UEAxMk YmFmMTgxMjAtOWMxMi00MjNiLWFjMGQtZjZmNzFlMjgyOGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ6OZSWam1/6P0F18MIv8krQGydj9946Gc6E sCVYJBtZyTSXeNyrHnpW6slmPPNB4CW0ySKLvMqGcKHn1XGtoDFX3+nb4FjWArNQ M5vIa3J1RVcb5PZrDAi1FMlgdIM1zbwMTJ9tURacX42LpYrObBbgFfZyYV2fm91t cF0VQLXTXxJXBDOinqMqioBiFqN/GtfbDD/byvgKe0PYmKCMfVehbcRf+/Rcnved sxELFypYoUVjGos1zhgx7FS+ehcUz9a2cPatnLCS0n/Af9g+IsPSURjgvavxIXJU n4OWv9Ifvpm2UObRgR3LF0yVatiy8t+mjAa6ZaNxZg4XmaVkqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgag5gBJd55rrpFIx2Qo2kRbXE5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGY1ODFmNGQtOTIxNi0z NDdjLTkzMDEtYjBhNTYwNWVjNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArETwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7N8gX+Ka1+6eTdqozI6Q726H4c5zMHywJBN5alO2QxFGVlx8fZ/llL zD0Nfd7TAm6DggzTr4+dTUsMoag1KAC5tmJPa1R7d18G8gg2jBs0+jbekVzAaSK9 a8cKFQ2m05clI6smMQwc8P20Z84N6ceqFZctS1Cl+BlVG6+5k7IzVR/CCWMgyGnz cRbKcj25pwuSUTxzDWmGBJ747BTcMD6+wtkNOAlmuWZk0zmssEjIH8uJPMiyRwto bI5Qmm5dqoh2C6GDOr5Be4uiQ+9dRbRkjm+8Th00J5yn6DhCWIK/seafJhSM+71v TUqRWjIsGo1CvDrlwEK5CjGcZdmqlSw= -----END CERTIFICATE-----Generated at Sat May 11 02:48:12 2024 by rpki-client on console-fra.rpki-client.org